Privacy Policy

Your privacy is important to us. This Privacy Policy explains how XDolls24.com (“we”, “our”, “us”) collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable EU and German data protection laws.

1. Data Controller

The data controller responsible for the processing of personal data on this website is:

XDolls24.com
Eichendorffstr 2a
57518 Betzdorf, Germany
Email: [email protected]

2. Collection of Personal Data

We collect and process personal data only when necessary for providing our services. This includes:

• Contact details (name, email address, phone number)
• Billing and shipping information (address, postal code, country)
• Payment details (used for Bank Transfer or Crypto processing)
• Technical data (IP address, browser type, device, and access time)

Data is collected when you:

• Place an order on our website
• Subscribe to our newsletter (if applicable)
• Contact us via email or contact form

3. Purpose of Data Processing

We process your personal data for the following purposes:

• To process and deliver your orders
• To provide customer support and respond to inquiries
• To send order confirmations and delivery notifications
• To improve website performance and user experience
• To comply with legal and tax obligations

4. Legal Basis

Data processing is carried out in accordance with Art. 6(1) GDPR on the following bases:

• Art. 6(1)(b) – Contract performance (order fulfillment)
• Art. 6(1)(c) – Legal obligations (invoicing, accounting)
• Art. 6(1)(f) – Legitimate interests (security, fraud prevention, analytics)
• Art. 6(1)(a) – Consent (newsletter subscription, optional forms)

5. Data Retention

We retain personal data only as long as necessary for the purpose for which it was collected, or as required by law (e.g., tax and accounting obligations). Customer and order data are typically stored for up to 10 years as required under German commercial law.

6. Payment Data

We do not store sensitive payment information such as bank or crypto wallet details on our servers. All payments are handled through secure, external gateways:

• Bank Transfer: Processed via your own financial institution (SEPA system).
• Crypto Payments: Processed via NOWPayments.io under their privacy policy.

Your payment data is transmitted securely and encrypted (SSL/TLS).

7. Cookies & Analytics

XDolls24.com uses minimal, privacy-friendly cookies to ensure site functionality and improve performance. We do not use invasive tracking tools or third-party advertising cookies.

Essential cookies are used for functions like cart persistence, language settings, and security. You can disable cookies in your browser, but some parts of the site may not function properly.

8. Data Security

Our website uses SSL encryption to protect all transmitted data. We also employ firewalls, regular security updates, and restricted server access to safeguard your personal information.

9. Data Sharing

Your data will not be sold, rented, or shared with third parties for marketing purposes. Data is only shared when necessary for:

• Order fulfillment (logistics partners, couriers)
• Legal obligations (tax authorities)
• Payment processing (banks, NOWPayments)

10. Your Rights Under GDPR

As a user, you have the following rights under the GDPR:

• Right to access your personal data
• Right to rectification of incorrect data
• Right to deletion (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to data processing
• Right to lodge a complaint with a supervisory authority

To exercise your rights, please contact us at [email protected].

11. Data Processing Location

All website data is processed on secure servers located within the European Union (EU).

12. Changes to This Policy

We may update this Privacy Policy from time to time to comply with legal or technical changes. The most recent version will always be available on this page.

Last updated: 08 October 2025